Sold by: Check Point Software Technologies
Deployed on AWS
Free Trial
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation, and with GWLB (starting with R81.20)
**Please note: To ensure optimal operations, Check Point recommends a 4 vCores machine size. This provides balanced efficiency and smooth performance, which most customers find ideal for their needs.
4.4
Overview
Video
Video 1
Video
Product video
Check Point Check Point Cloud Firewall is a cloud-native security gateway that delivers industry-leading threat prevention and multi-layered network security for workloads migrated to or deployed in AWS environments.
Comprehensive Cloud Network Security: Check Point Cloud Firewall for AWS protects cloud assets with a full suite of advanced security capabilities, including: firewall, Data Loss Prevention (DLP), Intrusion Prevention System (IPS), application control, IPsec VPN, URL filtering, antivirus, anti-bot, threat extraction, and threat emulations. These features enable proactive defense against known and unknown threats, ensuring robust protection for cloud workloads.
Industry-Leading Threat Prevention: Check Point Cloud Firewall for AWS provides advanced threat prevention to secure AWS environments from sophisticated threats, unapproved access, and application-layer Denial of Service (DoS) attacks with industry-leading catch rates (Miercom 2025 and Cyberratings 2025).
Full Control of Network Traffic: Check Point Cloud Firewall for AWS ensures secure, encrypted data flows between your on-premises network and your AWS VPCs. It inspects traffic entering and exiting private subnets in the VPC ("North-South") as well as between VPCs ("East-West").
Unified Security Management: Extend on-premises security policies into the AWS cloud with unified, centralized management via Check Point Security Management Server. Manage policies, logs, and reports consistently across AWS, hybrid, and on-premises environments from a single pane of glass. This listing includes the gateway only. For management, use Check Point Smart-1 Cloud: https://www.checkpoint.com/quantum/unified-cyber-security-platform/smart-1-cloud/
Automated, Scalable Cloud Security: Integrates with infrastructure-as-code tools like Terraform and Ansible for policy automation and cloud-native scaling. CloudGuard dynamically adapts security policies based on real-time cloud metadata and changes. Supports AWS Transit Gateway, auto-scaling, high availability, and multi-AZ redundancy.
Seamless AWS Integration: Check Point Cloud Firewall integrates with a broad range of AWS services, including Gateway Load Balancer, AWS Security Hub, VPC Ingress Routing, AWS Traffic Mirroring, AWS Transit Gateway, AWS Outposts, and Amazon Macie.
This Check Point Cloud Firewall gateway will be deployed as a single gateway, as a high availability cluster, or as an Auto Scaling group via Check Point CloudFormation templates (sk111013) or via automation tools such as Ansible, Terraform, etc. This PAYG-distributed security gateway is managed from a central Security Management Server which provides consistent security policy management, enforcement, and reporting within a single pane of glass. The Security Management Server is not included in this offering. To manage Check Point Cloud Firewall Gateway, it is recommended using Check Point Smart-1 Cloud (https://www.checkpoint.com/quantum/unified-cyber-security-platform/smart-1-cloud/ ).
Highlights
- Advanced Protection with Security Features: firewall, DLP, IPS, applicationcControl, IPsec VPN, URL Filtering, antivirus, anti-bot, threat extraction, and threat emulation. Includes Security Management Server.
- Industry-Leading Threat Prevention: Cutting-edge threat prevention with industry-leading catch rate of malware, ransomware and other types of attacks (per Miercom and Cyberratings, 2025).
- Unified Security Management: Provides consistent visibility, policy management, logging, reporting and control across hybrid-clouds and on-premises from a single pane of glass.
Details
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux Gaia 3.10
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 30 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
c6in.xlarge Recommended | $1.33 |
c7i-flex.12xlarge | $11.43 |
m6a.4xlarge | $3.73 |
c6in.4xlarge | $3.73 |
c5d.24xlarge | $20.93 |
c7i.16xlarge | $14.94 |
c5.24xlarge | $20.93 |
c4.xlarge | $1.33 |
c7i-flex.xlarge | $1.33 |
c5d.12xlarge | $11.43 |
Vendor refund policy
Terminate the instance at any given time to stop incurring charges.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Additional details
Usage instructions
Once the instance is running, connect to it using SSH, set an admin password using: 'set user admin password' followed by 'save config'. Then connect to https://[instance] using Internet Explorer (IE) to finalize the configuration. Notes:
- SSH password authentication is disabled in /etc/ssh/sshd_config
- For information regarding Firefox and Chrome refer to sk121373.
Support
Vendor support
This offer includes Premium Support. For the full list of included support services visit: https://www.checkpoint.com/support-services/support-plans/ To open a support ticket, you would need to have a Check Point user center account. If you do not have a user center account, you can sign up for one here: https://accounts.checkpoint.com . Need support? Contact us at https://www.checkpoint.com/support-services/contact-support/
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Check Point Software Technologies
By Palo Alto Networks
By Juniper Networks
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Multi-Layered Threat Prevention
Includes firewall, Data Loss Prevention (DLP), Intrusion Prevention System (IPS), application control, IPsec VPN, URL filtering, antivirus, anti-bot, threat extraction, and threat emulation capabilities
Advanced Threat Detection and Analysis
Incorporates Threat Extraction and Threat Emulation technologies for proactive defense against known and unknown threats with industry-leading catch rates
Traffic Inspection and Control
Inspects and controls encrypted data flows between on-premises networks and AWS VPCs, supporting both North-South (VPC ingress/egress) and East-West (inter-VPC) traffic inspection
Cloud Infrastructure Integration
Integrates with AWS Gateway Load Balancer, AWS Transit Gateway, AWS Security Hub, VPC Ingress Routing, AWS Traffic Mirroring, AWS Outposts, and Amazon Macie; supports deployment via CloudFormation templates, Terraform, and Ansible
Centralized Security Policy Management
Provides unified, centralized management of security policies, logs, and reports across AWS, hybrid, and on-premises environments through Check Point Security Management Server
Advanced Threat Prevention
Safeguards network from known and zero-day threats including exploits, malware, spyware, and command and control attacks using researcher-grade signatures and machine learning inspection engine.
Advanced URL Filtering
Defends against phishing, ransomware, and web-based attacks using inline machine learning-based web security engine with real-time detection of previously unseen threats and dynamic policy controls.
File-Based Threat Detection
Identifies file-based threats through inline static and dynamic analysis in the cloud with proprietary hypervisor technology for detection of sandbox-resistant malware.
DNS Security
Detects and prevents sophisticated DNS-layer network attacks and data exfiltration attempts.
Dynamic Policy Management
Applies policy definitions to cloud assets based on AWS tags, Application IDs, User IDs, geographies, or zones with automatic adaptation to infrastructure changes without manual intervention.
Next Generation Firewall Architecture
High-performance firewall solution with core firewall, VPN, NAT, and advanced L4-L7 security services including application security, IPS, and anti-virus capabilities.
Anti-Virus and Malware Protection
Cloud-based anti-virus protection that detects and blocks spyware, adware, viruses, keyloggers, and other malware over POP3, HTTP, SMTP, and FTP protocols.
Intrusion Detection and Prevention
Intrusion detection and prevention (IPS) system integrated with application visibility and control through AppSecure for threat detection and workload protection.
VPN and Secure Connectivity
IPsec and full mesh VPN termination services enabling secure connectivity from on-premises data centers, campuses, and branches to AWS cloud across geographically dispersed VPCs.
AWS Cloud Service Integration
Native integration with AWS services including Elastic Load Balancer, Auto-Scaling Groups, CloudWatch, Security Hub, Key Management Service, Elastic Network Adapter support, and Gateway Load Balancer with L3 gateway and L4 load balancer capabilities.
Standard contract
No
No
No
Customer reviews
GeraldChege
Cloud security has protected our emails and backups and now simplifies hybrid protection
Reviewed on Apr 24, 2026
Review from a verified AWS customer
What is our primary use case?
We use Check Point Cloud Firewall (formerly CloudGuard Network Security) for most of the things in the cloud. We protect our things, especially Microsoft emails. We also have things that are actually put in the clouds like our institution's backups which are in the cloud.
How has it helped my organization?
We integrated Check Point Cloud Firewall (formerly CloudGuard Network Security) with the on-premises solutions, the normal ones, the URL filtering, such products, and the normal Check Point to other Check Point blades.
Check Point Cloud Firewall (formerly CloudGuard Network Security) streamlines our security.
Some of the risks that we used to worry about are now taken care of, and we no longer have to worry about those risks.
In the process of migrating from cloud to on-premises and from on-premises to cloud, there are threats because we are still online and there are so many threats. With Check Point Cloud Firewall (formerly CloudGuard Network Security), we are guaranteed protection from end to end, from user to cloud and cloud to user.
What is most valuable?
First and foremost, I like the security of Check Point Cloud Firewall (formerly CloudGuard Network Security). The security is good, and the cloud security is very good, especially when nowadays you don't know what's happening in the cloud. The cloud has become a bit complex, and there are so many people offering cloud services.
When you use Check Point Cloud Firewall (formerly CloudGuard Network Security), they guarantee you protection. That's why now you don't need to lose your sleep because your data is in somebody's cloud solution.
Check Point Cloud Firewall (formerly CloudGuard Network Security) is very useful.
What needs improvement?
The pricing is a bit very high.
Especially when it comes to pricing, Palo Alto is cheaper. We have to compare pricing between the two solutions.
For how long have I used the solution?
When they started with the cloud firewall, it has been about two to three years.
What do I think about the scalability of the solution?
The ability to expand showed good progress. I can give it a 10.
How are customer service and support?
The technical support is wonderful and perfect.
How was the initial setup?
The setup is not very complex. It is a bit moderate.
What about the implementation team?
We did the implementation in conjunction with Check Point technicians.
What's my experience with pricing, setup cost, and licensing?
Check Point Cloud Firewall (formerly CloudGuard Network Security) is a good product. The only issue is that the costing is too high.
Which other solutions did I evaluate?
We are in the process of doing a proof of concept of Palo Alto.
What other advice do I have?
I have worked with Check Point as a product for the last 15 to 16 years, not on cloud.
We buy through partners.
We are the end-user and not a partner.
I would rate this review an 8 overall.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Sanjana C.
Centralized, Layered Defense with Strong Visibility and Logging
Reviewed on Apr 13, 2026
Review provided by G2
What do you like best about the product?
What I like most about Check Point security is its centralized policy management and how it brings firewall, IPS, anti-bot, anti-virus, and sandboxing together into a single, layered defense model. It also stands out for strong logging, identity awareness, and solid visibility, which is helpful for audits as well as incident response.
What do you dislike about the product?
Security is widely respected for its high catch rates and robust "single pane of glass" management, it is often a "love it or hate it" platform. So broadly no issue to be report as of now
What problems is the product solving and how is that benefiting you?
It performs well across multiple categories. It offers a stronger security posture, helps reduce risk, enables a faster response to threats, and supports smooth operations overall. I also find the interface user-friendly.
ANKIT S.
Effective Threat Prevention and Unified Cloud Security Management
Reviewed on Apr 08, 2026
Review provided by G2
What do you like best about the product?
It provides deep visibility and control, helping teams quickly detect, respond, and remediate threats across distributed environments.it stands out for combining scalability, automation, and high detection accuracy.
What do you dislike about the product?
The UI sometimes feel outdated or slow at times, with occasional lag while loading dashboards or navigating settings.Logs can be detailed but not always easy to analyze, making issue resolution time-consuming.
What problems is the product solving and how is that benefiting you?
Security gaps during vulnerability remediation
Fixing vulnerabilities takes time, leaving systems exposed.
Solution & Benefit: CloudGuard can apply real-time protection and “virtual patching” while fixes are in progress, minimizing exposure windows.
Fixing vulnerabilities takes time, leaving systems exposed.
Solution & Benefit: CloudGuard can apply real-time protection and “virtual patching” while fixes are in progress, minimizing exposure windows.
Rakesh R.
Industry-Leading Threat Prevention with Seamless Unified Management
Reviewed on Apr 07, 2026
Review provided by G2
What do you like best about the product?
I like its industry-leading threat prevention best, blocking 100% of malware and exploits with zero false positives per recent CyberRatings tests. The unified management console also stands out, offering consistent policies and visibility across multi-cloud and on-premises setups for seamless operations
What do you dislike about the product?
The main drawbacks of Check Point CloudGuard Network Security are its steep learning curve and complex initial setup, often requiring deep familiarity with Check Point ecosystems or cloud architectures. Users also criticize the high pricing, dated user interface with occasional lags, and limited support for some features like IPv6, serverless, or certain VPN modes
What problems is the product solving and how is that benefiting you?
Main Problems Solved
Multi-Cloud Complexity: Provides single-pane visibility and consistent policies for AWS, Azure, GCP, and hybrid setups, easing migrations without policy rework.
Threat Prevention Gaps: Delivers real-time blocking of exploits/malware (100% efficacy in tests), plus IaC integration for DevSecOps.
Misconfigurations & Drift: Continuous posture analysis, auto-remediation, and context-aware alerts fix vulnerabilities from code to runtime.
Multi-Cloud Complexity: Provides single-pane visibility and consistent policies for AWS, Azure, GCP, and hybrid setups, easing migrations without policy rework.
Threat Prevention Gaps: Delivers real-time blocking of exploits/malware (100% efficacy in tests), plus IaC integration for DevSecOps.
Misconfigurations & Drift: Continuous posture analysis, auto-remediation, and context-aware alerts fix vulnerabilities from code to runtime.
Banking
Strong Hybrid Cloud Security, but Setup Is Complex and Pricey
Reviewed on Apr 02, 2026
Review provided by G2
What do you like best about the product?
It’s well known for offering consistent security rules across intricate hybrid and modern cloud options. It has defence mechanism against threats, malware & ransomeware
What do you dislike about the product?
Expensive prices and difficult initial setup and need high level tech knowledge to setup and it’s take long time into investigate, troubleshoot and finding root cause on issues found into setup
What problems is the product solving and how is that benefiting you?
Securing fragmented verticals, dynamic and modern cloud environments providing utility, preventive & detective functionalities, that eliminate security gaps and build shield to avoid attacks and helping zero-day attacks achievements